90420e863e
pkg/storage/etcd3: validate revision invariant
...
We must ensure that we notice if the etcd behavior on linearized reads
changes.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: ed5fd905f2b42e9919d99c40a1cb25014f0a7f89
2022-04-13 10:57:02 -07:00
41c1f65bf6
pkg/storage/etcd3: correctly validate resourceVersions
...
In a number of tests, the underlying storage backend interaction will
return the revision (logical clock underpinning the MVCC implementation)
at the call-time of the RPC. Previously, the tests validated that this
returned revision was exactly equal to some previously seen revision.
This assertion is only true in systems where no other events are
advancing the logical clock. For instance, when using a single etcd
cluster as a shared fixture for these tests, the assertion is not valid
any longer. By checking that the returned revision is no older than the
previously seen revision, the validation logic is correct in all cases.
Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
Kubernetes-commit: eba25cdbbcc5d35e707516194f64d8ed363c2773
2022-03-23 12:44:49 -08:00
ac613d389a
Merge pull request #109109 from mborsz/exec_time
...
Add apf_execution_time log field.
Kubernetes-commit: 7380fc735aca591325ae1fabf8dab194b40367de
2022-04-08 17:20:14 +00:00
85825e1b4d
Merge pull request #109340 from liggitt/revert-generate-name
...
Revert generate name
Kubernetes-commit: 21184400a4ac185e7e4c6ddb52eb9c25a4cc453f
2022-04-06 21:20:00 +00:00
268935d657
Revert "remove unwanted values returned from dry-run"
...
This reverts commit 60c1d58d02c7374645c00281dda3fd656264e1c5.
Kubernetes-commit: adb76219198235bb069bb67e924455dceaaba7c4
2022-04-06 12:34:42 -04:00
c15091f0fd
Merge pull request #109271 from liggitt/field-validation-beta
...
Revert "Enable ServerSideFieldValidation feature gate on by default in beta
Kubernetes-commit: 92a1d0f84c710755a570eaf05f3e315a8c9deb1b
2022-04-04 10:30:11 -07:00
9c9129eb3d
Revert "Enable ServerSideFieldValidation feature gate on by default in beta"
...
This reverts commit a3a24e1c7b379c26b407ed081a0a17fde2410180.
Kubernetes-commit: 34522912d75816f75f43684612b5f9de42c60318
2022-04-03 22:46:36 -04:00
1ae0fa4820
Merge pull request #109272 from liggitt/cronjob-feature-gate
...
Move cron job feature gate to correct file
Kubernetes-commit: a814b2af1c632afb9e2e231ce76379fa3c27bb25
2022-04-04 17:19:48 +00:00
4921095861
Move cron job feature gate to correct file
...
Kubernetes-commit: 495b01ef6c5a5390fa44d9ffed00513a6d2263ef
2022-04-03 22:56:01 -04:00
1561dcc9b6
Merge pull request #109188 from wojtek-t/pf_mitigate_delegated_requests
...
Fix the overestimated cost of deletaged API requests in P&F
Kubernetes-commit: 885f14d162471dfc9a3f8d4c46430805cf6be828
2022-04-01 01:19:38 +00:00
e27e87dbdc
Merge pull request #109181 from liggitt/auditing-disabled-errors
...
Avoid log spam in servers without auditing enabled
Kubernetes-commit: 7d485da3262df7e4492a099998e59bf8b2f1ab52
2022-03-31 13:20:20 +00:00
b6f111beb9
Fix the overestimated cost of deletaged API requests in P&F
...
Kubernetes-commit: 14a4fd385353b914265acb233fa8d2a426af7f90
2022-03-31 09:47:41 +02:00
828212b872
Avoid log spam in servers without auditing enabled
...
Kubernetes-commit: f23b9a500272c4c6ffaf2a577762f9e2e4370494
2022-03-31 01:50:24 -04:00
009c810dcb
Merge pull request #109134 from pacoxu/patch-8
...
TestPreShutdownHooks: change timeout to 200ms
Kubernetes-commit: cb6ca16d476132bf1dbfb37e0fb6372a17622238
2022-03-30 09:19:38 +00:00
4079840d72
Merge pull request #109120 from kevindelgado/ss-validation-metrics
...
Track field validation in metrics
Kubernetes-commit: c7fc0f9125a239b391df0d7d06e61b8f968ef956
2022-03-30 05:24:03 +00:00
b13176b71a
Merge pull request #109107 from liggitt/deprecated-cert-audit
...
Add audit annotations and log prefixes to deprecated cert warnings
Kubernetes-commit: 7fba4f75c5eb7d248b8e99a11f5f3edfc24442d3
2022-03-30 05:24:00 +00:00
320581ace3
Merge pull request #109102 from liggitt/darwin-tls
...
Tolerate additional error messages in TLS unit tests
Kubernetes-commit: 6358d36fbfb1a899de227bd053279ad258bddab3
2022-03-30 05:23:58 +00:00
ee1ac0ffde
Merge pull request #109031 from Jefftree/openapiv3beta
...
OpenAPI V3 Enable Beta
Kubernetes-commit: 904c30562a9a34d26ff3e76db29d00daea2e0f60
2022-03-30 05:23:55 +00:00
7f4f1bb37e
Merge pull request #108745 from aramase/aes-gcm
...
feat: prepare KMS data encryption for migration to AES-GCM
Kubernetes-commit: 0c5574c2a3211c3673ee01703c96a24cf58b4b4d
2022-03-30 05:23:53 +00:00
e389c500bd
TestPreShutdownHooks: change timeout to 1s
...
Kubernetes-commit: 99c447ff0e93157bf0760498c4090483162e7cf5
2022-03-30 10:18:56 +08:00
4a77293840
Merge pull request #108033 from tkashem/pre-shutdown-hook
...
apiserver: stop http server after pre shutdown hooks
Kubernetes-commit: 33f56203e3d5f18831407c435a37632ce8a2253a
2022-03-30 01:23:25 +00:00
9e54246a1f
Merge pull request #108032 from deejross/kep3140-cronjob-timezone
...
KEP 3140: TimeZone support for CronJob
Kubernetes-commit: 0f2300575c805bb70ba181957684361bcd25f86a
2022-03-30 01:23:23 +00:00
826d18bf6e
Track field validation in metrics
...
Kubernetes-commit: 0c432ccf58b968040bcf6009bc255eeff0092f5a
2022-03-29 18:38:58 +00:00
d1014d8c99
For each call, log apf_execution_time
...
Kubernetes-commit: 488a19184e847ed88e1cc81995fabfe1f88f5347
2022-03-29 14:55:52 +00:00
689a39c38a
Add audit annotations and log prefixes to deprecated cert warnings
...
Kubernetes-commit: f1dd9a611415120af5158f3feb0a0ef6a5c6d7d1
2022-03-29 10:41:40 -04:00
e4a0d4ca49
Merge pull request #108126 from sanposhiho/doc/generatedname
...
fix the doc about generateName conflict
Kubernetes-commit: 1ea07d482a5ec15afac5ea837585174579fc0f57
2022-03-29 13:19:45 +00:00
5f8feb467c
Tolerate additional error messages in TLS unit tests
...
Kubernetes-commit: cff4eeef9f1880b42b8c3d3b8f3a27a89540dbe0
2022-03-29 08:57:31 -04:00
04ebcd9672
Merge pull request #108992 from alexzielenski/cache-busting-client-go
...
client-go: OpenAPI v3 support
Kubernetes-commit: 656dc213ce43f1ecfa7f54eb1f01864468f8f0e2
2022-03-29 05:21:19 +00:00
59074d75ab
Merge pull request #109078 from tallclair/audit-mutex
...
Audit mutex
Kubernetes-commit: c64a8cdc2daf2935c2fbfdbbc10c554190a645db
2022-03-29 05:21:17 +00:00
2ebefbd1aa
Merge pull request #109080 from tallclair/audit-cleanup
...
Delete dead code
Kubernetes-commit: 41830a1f79c795881e62911a8fbd1f971afae48b
2022-03-29 01:23:10 +00:00
7629acd5c8
Merge pull request #108629 from skitt/blang-semver-v4
...
Upgrade to blang/semver/v4 v4.0.0
Kubernetes-commit: 6571eb24508657ad42ebdcb387aee6f532ea0822
2022-03-29 01:23:09 +00:00
625cf21c7c
Merge pull request #93438 from tallclair/audit-ips
...
Document the sources for the sourceIPs audit log field
Kubernetes-commit: 0bbb617412e6c281e3a1ab9512457b86f8e2f20d
2022-03-29 01:23:06 +00:00
d39da465cb
Merge pull request #108889 from kevindelgado/validation-beta-flag
...
ServerSideFieldValidation Beta Graduation
Kubernetes-commit: ea0dc6ed417c7cd398cd5e02cdaf04721265eee2
2022-03-29 01:23:04 +00:00
d0f7a9b250
Merge pull request #109018 from wojtek-t/deprecate_dropped_requests
...
Deprecate apiserver_dropped_requests_total metric
Kubernetes-commit: 24cb73bb9027b089e05d27cc29be0987ab8153ae
2022-03-28 21:27:15 +00:00
0bdbab6e34
Merge pull request #108282 from sftim/20220222_reword_types_container_runtime_neutral
...
Update types to be neutral about container runtime
Kubernetes-commit: 3a3c9bc5c0bf1d1626fb26696798b85e776704af
2022-03-28 21:27:12 +00:00
9fdeba9ae0
Switch beta flag on
...
Kubernetes-commit: 8e88d462109ef46b35b870bc73284b9a64fcc921
2022-03-28 13:43:01 -07:00
e4486afb41
Separate OpenAPI V2 and V3 Config
...
Kubernetes-commit: 67d3dbfaae87a5bf3325fadda7266ed223766a53
2022-03-28 13:18:56 -07:00
e09048caa8
generated: Update kube-openapi and vendor
...
Kubernetes-commit: 550d6383b5219ac43b8c86cf57807c47b82919aa
2022-03-28 13:20:46 -07:00
5258d09ebc
Delete dead code
...
Kubernetes-commit: d2f53a08567b763003bea6e9c45b688e604b8aff
2022-03-28 11:51:59 -07:00
1e36b0a9fb
Don't add audit annotations directly to the audit event
...
Kubernetes-commit: bdebc62d49293a0fbbd7e0d95bfd94b1ce21015c
2022-03-28 11:38:38 -07:00
8c9e58df37
Merge pull request #109024 from stlaz/sha1_sig_deprecation
...
webhooks,aggregation: add metrics to count certs with SHA1 signatures
Kubernetes-commit: e0ca5cfd73bd046ee5fbdef50e073842e6fbc52f
2022-03-28 17:29:32 +00:00
95587e321e
Audit annotations mutex
...
Kubernetes-commit: c3a68d5de83116289799571de57ace47cd950364
2022-03-28 17:21:14 +00:00
3d3cf542f9
update vendor
...
client-go depends on more of kube-openapi v3 now
Kubernetes-commit: bb799d97066bbae4eaacd2ecc2a57f7fd42fa142
2022-03-28 10:07:56 -07:00
6144d1e2b7
Merge pull request #108996 from cici37/errUpdate
...
Bump kube-openapi and update err handling
Kubernetes-commit: 898443f40583cd0fd864e9b11c8156faf64b680a
2022-03-27 01:22:31 +00:00
034ebc2d9b
x509metrics: rename 'missing_san*.go' files to match their new purpose better
...
Kubernetes-commit: 5479306b1326bcbf29ae2ca0694a36555ed1ce35
2022-03-25 17:03:13 +01:00
23c7d60c29
Deprecate apiserver_dropped_requests_total metric
...
Kubernetes-commit: b106b2621c454b8f38b9dc28935994c33426ee75
2022-03-25 14:58:41 +01:00
475546c99d
Enable ServerSideFieldValidation feature gate on by default in beta
...
Kubernetes-commit: a3a24e1c7b379c26b407ed081a0a17fde2410180
2022-03-24 23:56:48 +00:00
df7621debc
Bump kube-openapi
...
Kubernetes-commit: 383eb99bebdd5746732b7f6789907ea3598ee98e
2022-03-24 15:11:08 -07:00
a257d00b02
Merge pull request #109040 from jpbetz/revert-cel-bump
...
Revert #108954 : Use CEL EagerlyValidateDeclarations to improve compilation performance
Kubernetes-commit: f411c4068c89c540654a774178d55d74c927e2f9
2022-03-26 05:18:59 +00:00
1ad0d6cc84
Merge pull request #109030 from liggitt/revert-apf-ssa
...
Revert "Revert "Merge pull request #107797 from tkashem/revert-107456""
Kubernetes-commit: 6c73b674d7aa0113cf0d90bd47fdd80c768b7b5b
2022-03-26 05:18:57 +00:00
Steve Kuznetsov